TYPO3 CMS Webhooks 服务器端请求伪造 (Server-Side Request Forgery)

SSRF 漏洞允许攻击者利用 Webhooks 绕过网络安全措施，访问原本无法访问的内部系统。攻击者可以利用此漏洞扫描内部网络，获取敏感信息，甚至执行恶意代码。由于需要管理员级别的后端用户帐户才能利用此漏洞，因此攻击者需要先获得对 TYPO3 CMS 的访问权限。如果内部服务未正确配置，攻击者可能能够利用此漏洞访问数据库、API 或其他敏感资源，造成严重的安全风险。

Organizations using TYPO3 CMS with the cms-webhooks component installed and configured, particularly those with administrator-level user accounts and exposed internal services, are at risk. Shared hosting environments where multiple TYPO3 instances share the same server resources are also at increased risk.

• php: Examine TYPO3 webhook configurations for suspicious URLs or internal resource references. Use grep to search for patterns indicative of SSRF attempts in TYPO3 logs. • generic web: Monitor access logs for unusual outbound requests originating from the TYPO3 server, particularly those targeting internal IP addresses or services. • linux / server: Use journalctl -u typo3 to check for error messages or unusual activity related to webhook processing. Implement auditd rules to monitor file access and modification within the TYPO3 installation directory.

1. 2025-05-20Disclosure

   disclosure

1. 已保留2025-05-14
2. 发布日期2025-05-20
3. EPSS 更新日期2026-03-23

最有效的缓解措施是升级到受影响组件的修复版本。TYPO3 官方建议升级至 TYPO3 版本 12.4.31 LTS 或 13.4.12 LTS。在无法立即升级的情况下，可以考虑实施一些临时缓解措施，例如限制 Webhooks 可以访问的外部 URL，并加强内部服务的安全配置。此外，可以配置 Web 应用防火墙 (WAF) 或代理服务器来检测和阻止恶意的 SSRF 请求。